NetSight
IP …
medium5.5

CVE-2019-19922

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service agai…

Impact

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.3.9
OracleSd-Wan Edge
Version 8.2
CanonicalUbuntu Linux
Versions 18.04, 19.04
DebianDebian Linux
Version 8.0
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
from 11.0 through 11.70.2
NetappFas\/Aff Baseboard Management Controller
All versions
NetappHci Baseboard Management Controller
Version h610s
NetappSolidfire \& Hci Management Node
All versions
NetappSteelstore Cloud Integrated Storage
All versions

Weakness classification

CWE-400

References